CVE-2025-11839: GNU Binutils prdbg.c tg_tag_type return value
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
Other sources
GNU Binutils prdbg.c tgtagtype return value
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What security impact does CVE-2025-11839 have on GNU Binutils?
CVE-2025-11839 can lead to potential system exploitation through unchecked return values in the tg_tag_type function.
How can I determine if my version of GNU Binutils is affected by CVE-2025-11839?
Any version of GNU Binutils prior to 2.45 is vulnerable to CVE-2025-11839.
What are the recommended steps to mitigate CVE-2025-11839?
To mitigate CVE-2025-11839, users should upgrade to GNU Binutils version 2.46 or later.
Is it possible to exploit CVE-2025-11839 remotely?
No, the exploit for CVE-2025-11839 requires local access to the system.
What specific function in GNU Binutils is affected by CVE-2025-11839?
The tg_tag_type function in the prdbg.c file is the specific function affected by CVE-2025-11839.